CVE-2026-66585: WordPress WP Cafe Pro plugin < 3.0.15 - Sensitive Data Exposure vulnerability
Published Aug 24, 2026
·Updated
Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.
Affected Software
1 affected component
WP Cafe Pro<3.0.15
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WP Cafe Pro pluginto a version that resolves this vulnerability.Fixed in 3.0.15
Event History
Aug 24, 2026
CVE Published
via MITRE·11:54 AM
Data Sourced
via MITRE·11:54 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is unauthenticated, so an attacker does not need a WordPress account or other prior privileges to attempt exploitation.
2
Which installations are affected?
WP Cafe Pro versions earlier than 3.0.15 are affected. Upgrading to version 3.0.15 or later addresses the affected version range.
3
What is the likely impact?
The vulnerability can expose sensitive data. The provided severity vector indicates network-based exploitation with low attack complexity and no user interaction, with high confidentiality impact but no stated integrity or availability impact.